Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — Son Goku Iconic Space Bull Live Wallpaper [adware] + malext.io malicious_extension_sentry (+2.5, capped).
• Uninstall and install URL both hijack to gameograf.com with ad-campaign UTM tracking parameters.
• Privacy policy is Google's generic account policy — not scoped to this extension, admits data collection and 3rd-party sharing.
• NewTab override + search permission = full search-monetization shell pattern.
• Developer email is free webmail (gmail) with no business identity; no developer name supplied.

Evidence

• install_url_hijack manifest onInstalled redirects to gameograf.com with UTM campaign tags — classic monetization shell pattern.
• uninstall_url_hijack manifest setUninstallURL points to gameograf.com with identical UTM parameters — third-party uninstall hijack.
• newtab_override manifest chrome_url_overrides.newtab replaces every new-tab page with index.html.
• generic_privacy_policy store Policy URL is myaccount.google.com/privacypolicy — Google's own policy, not scoped to this extension. Admits data collection + 3rd-party sharing.
• free_webmail_no_dev_name store Developer email halilseker3455@gmail.com; developer_name empty; no verifiable business identity.
• js_external_hosts crx Extension contacts gameograf.com, instagram.com, netflix.com, youtube.com, x.com — 6 external hosts across unrelated domains.
• verified_publisher store Verified publisher badge present; applies -1.0 cap discount only (free-webmail condition applies).
• csp_absent manifest content_security_policy is null on MV3 extension — no explicit CSP declared.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — Son Goku Iconic Space Bull Live Wallpaper [adware] + malext.io malicious_extension_sentry; score 5.47 -> 7.97 (+2.5 cap 2.5).

Permissions Breakdown

• search medium Allows querying the browser search engine API; combined with newtab override creates search monetization surface.
• chrome_url_overrides.newtab high Replaces every new-tab page; primary vector for ad/search monetization and user tracking.

Pillar Scores

Bookkeeping